Home

CVE-2022-22484

Description

IBM Spectrum Protect Operations Center 8.1.12 and 8.1.13 could allow a local attacker to obtain sensitive information, caused by plain text user account passwords potentially being stored in the browsers application command history. By accessing browser history, an attacker could exploit this vulnerability to obtain other user accounts passwords. IBM X-Force ID: 226322.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
0.019

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2022-22484 are affected in IBM Spectrum Protect Server *Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234